longitude-one/wkb-parser

Release historycaution

The package has existed for about 2 years and 5 months with seven releases, but only one release occurred in the last 12 months; the recent latest release partly offsets the slower cadence.

Repo bus factorcaution

All commits in the last three months came from one contributor, so maintenance currently depends heavily on a single active person; organization ownership provides some handoff capacity but does not remove the concentration.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less explicit for consumers and maintainers.

Workflow auditcaution

The workflow uses read-only permissions and has no untrusted checkouts, injection findings, or high-severity audit results. However, all six analyzed action references are unpinned, which weakens build reproducibility and action supply-chain control.